Beyond the Gateway: Fine-Grained Authorization for AI Agents
summary
The talk explains fine-grained authorization approaches for AI agents beyond simple API gateways, focusing on technologies like OAuth, JWTs, attribute-based access control (ABAC), and capability-based tokens. It covers problems of least-privilege delegation, contextual and per-action permissions for autonomous agents, and practical implementation patterns and mitigations for misuse in distributed agent architectures.
AI-written summary · about
chapters (7)
- 0:00AI agent authorization intro
- 6:06Two-layer identity model
- 8:36Fine-grained authorization
- 13:12Policy toolkit demo
- 17:25Runtime authorization flow
- 22:49Model advantages
- 24:59Summary & Q&A
related talks
55mYour AI Agents Are Overprivileged: The Case for Fine-Grained Authorization
30mYour AI Agents Are Overprivileged: The Case for Fine-Grained Authorization
30mFine-Grained Authorization: The Missing Piece in Agentic AI Security
57mFine-Grained Authorization: The Missing Piece in Agentic AI Security
40mIn AI We Trust? Securing the Future, One Agent at a Time
24mBuilding Trustworthy AI Authentication & Authorization for AI Agents
29mHow Auth0 Secures AI Authentication & Authorization for AI Agents
30mRedefining Access Control: Scaling Policy as Code for Humans and AI Agents